← Database

CVE-2005-2640

MEDIUM CVSS: 5.0 Published: 2005-08-23 Modified: 2026-06-16

Description

Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE with pre-shared key authentication, allows remote attackers to enumerate valid usernames via an IKE Aggressive Mode packet, which generates a response if the username is valid but does not respond when the username is invalid.

Affected Platforms

Neoteris Instant Virtual ExtranetNetscreen Netscreen-Sa 5000 SeriesNetscreen Ns-50Ns25Juniper Netscreen-IdpNetscreen Netscreen-Sa 5020 SeriesNetscreen Ns-100Netscreen Ns-500Netscreen Netscreen-Sa 5050 SeriesJuniper Netscreen-Idp 10Juniper Netscreen-Idp 500

Weakness Type

NVD-CWE-Other

References